[Webware-discuss] What is a well designed Webware application?

[<ham...@ya...>]

Tom Schwaller:

> >* user logs in (SecurePage example is there, but what to
> >   do when there are no cookies? How to use session ids?)

Chuck Esterbrook:

> WebKit does not currently support sessions without cookies. The only
> way that I know of to do so is to pass the session id in all the URLs
> that hit your site. I believe these are the different ways you could
> do this: 
> 
> 1. Require the person coding the application to manually make sure
> that every URL carries the session id 

> 2. Have WebKit rewrite responses so that all URLs hitting the site
> will carry the session id. This would require parsing and updating 
> HTML.

Another way to have the session ID returned in every request is to have
it embedded in the requested path:

    http://www.mysite.com/8631669/page1.psp

This approach has the advantage that once the user's browser has been
redirected to such an ID-embedded URL, each servlet or PSP page that
makes up the application can simply contain relative paths to the other
servlets/pages without having to embed the ID in any hyperlinks. Thus
page1.psp can contain a simple relative link to page2.psp, and the
browser's resolution of relative paths will ensure that the session ID
will be incorporated in the subsequent request:

    http://www.mysite.com/8631669/page2.psp

On the server side you just have to some mechanism for extracting the
IDs out of the request.

Hamish Lawson




____________________________________________________________
Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie